Phishing sites impersonating Ton

PhishDestroy has recorded 115 phishing domains impersonating Ton since 2025-08-06, 6 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .io. The official Ton domain is ton.org: any other site asking for your login or wallet is not Ton.

115
Domains, all time
6
Last 30 days
50
Online at last check
26
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 02026-07-29: 12026-07-30: 12026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 12026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 12026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 12026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 22026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 22026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 12026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 12026-10-11: 12026-10-12: 02026-10-13: 12026-10-14: 02026-10-15: 02026-10-16: 22026-10-17: 02026-10-18: 12026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Ton phishing domains detected per day: 19 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Ton site

Official domain: ton.org.

Words most often added to the brand in reported domains: mixer, duplicate, disabled, usdt, aml, staking, minefreee, tonlucky, gamacasino, coinmarketcape.

  • Type the address yourself or use a bookmark; phishing links for Ton arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Ton does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Ton phishing domains

The 50 most recently detected domains impersonating Ton
DomainFirst detectedStatus at last checkRegistrar
bmsmenashop.shop2026-10-18OnlineDynadot
snapchat-plus.com2026-10-16OnlineOVH
bigredstore.shop2026-10-16OnlineDynadot
trust-suppport.com2026-10-13OfflineTUCOWS.COM
bauhaus2yourhousedesign.shop2026-10-11OnlineDynadot
kreischerdesign.com2026-10-10OnlineCloudflare
turbocoins.org2026-09-21OnlineNICENIC
trustwallet-helpmgmt.com2026-09-12OfflineCosmotown
surefx.live2026-09-12OnlineSav.com
tonmine.pro2026-09-05OnlineTrustname.com
domewex.com2026-09-05OnlineTrustname.com
carrefourtemis.ca2026-08-31OnlineCENTRALNIC CANADA
101film.live2026-08-28OnlineDynadot
polymarket-predict.gr.com2026-08-22OnlineKey-Systems
rainbet-casinos.de2026-08-18Online—
ekmm.0537blog.com2026-08-05OnlineGoDaddy.com
yonewex.com2026-07-30OnlineTrustname.com
chemsoll.com2026-07-29OnlineTurkticaret.net Yazılım Hizmetleri Sanay
bcinvestors.live2026-07-27OnlineDynadot
ton.app-beefy.lol2026-06-15OnlineDynadot
admin.cyusd.org2026-06-15OnlineJuly Name
yeahchain.com2026-06-15OnlineGname.com
safetontransact.pages.dev2026-04-29OnlineCloudflare
fi-communication.com2026-04-25OnlineName.com
pidort.pages.dev2026-04-19OnlineCloudflare
fortune-spindriftlab.click2026-04-15OnlineDynadot
usdtflow.ru2026-04-07OnlineREGRU-RU
bemotex.com2026-04-05OfflineMAT BAO
notcointon.pages.dev2026-03-31OnlineCloudflare
flashtoken.pages.dev2026-03-28OnlineCloudflare
redoclaim.pages.dev2026-03-25OnlineCloudflare
qhuehfwihcwefdjsf.pages.dev2026-03-25OnlineCloudflare
myzdy.com2026-03-17OnlineGname.com
veivax.com2026-03-04UnknownNiceNIC
bitlydo.com2026-03-04OfflineOnamae.com
soadax.com2026-03-02UnknownNiceNIC
new-glenn.live2026-02-28Taken downNiceNIC
tonkeeperpro.com2026-02-26Offline—
connect-ton.vercel.app2026-02-26OnlineTucows Domains
bitfiz.net2026-02-26OfflinePorkbun
clansebit.com2026-02-26OfflineWeb Commerce Communications dba WebNic.c
cryptoslx.com2026-02-26OfflineGname.com
runadex.com2026-02-26OfflineWeb Commerce Communications dba WebNic.c
valkebit.com2026-02-26OfflineWeb Commerce Communications
potionalpha.com2026-02-26Taken downGoDaddy.com
cryptodude.org2026-02-26Taken downGname.com
ton-aml.net2026-02-26OfflinePublicDomainRegistry.com
app-app-mytonwallet.gitbook.io2026-02-26OnlineCloudflare
viralhigh.com2026-02-26OnlineOnamae.com
koavax.com2026-02-26Offline—

All 115 Ton reports

Where they are registered and hosted

Registrars

  1. NiceNIC13
  2. Cloudflare13
  3. Gname.com6
  4. Hello Internet5
  5. NameSilo5
  6. Web Commerce Communications5
  7. NameCheap4
  8. Dynadot4

Top-level domains

  1. .com59
  2. .io6
  3. .live6
  4. .dev6
  5. .shop4
  6. .net3
  7. .biz3
  8. .org3

Hosting networks

  1. CLOUDFLARENET, US38
  2. Cloudflare, Inc.20
  3. CLOUDFLARENET - Cloudflare, Inc., US18
  4. AMAZON-02, US8
  5. N963-AS-AP N963 PTE. LTD., SG3
  6. AS-HOSTINGER Hostinger International Limited, CY3
  7. AMAZON-02 - Amazon.com, Inc., US2
  8. AS13335 Cloudflare, Inc.2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Ton; share of all PhishDestroy reports: 0.05%.